Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/Tixj9aaXyoxnN9Im74ziDdIZ_Zo.roa
File: Tixj9aaXyoxnN9Im74ziDdIZ_Zo.roa (raw, json)
Hash identifier: a1BJKfn6mW/dx8FDsu8a6wmd/TNTkHkzXAOJRfIddFg=
Subject key identifier: 4E:2C:63:F5:A6:97:CA:8C:67:37:D2:26:EF:8C:E2:0D:D2:19:FD:9A
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 019F022DFE720D59669496EA0DC6D6D22F34
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/Tixj9aaXyoxnN9Im74ziDdIZ_Zo.roa
Signing time: Fri 26 Jun 2026 04:26:36 +0000
ROA not before: Fri 26 Jun 2026 04:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201959
IP address blocks: 185.58.64.0/22 maxlen: 22
213.193.236.0/24 maxlen: 24
2a04:df40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:2d:fe:72:0d:59:66:94:96:ea:0d:c6:d6:d2:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Jun 26 04:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e2c63f5a697ca8c6737d226ef8ce20dd219fd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:ad:b8:24:65:99:fd:d1:58:1f:7c:35:a7:
2f:d3:d8:3e:f7:ad:fc:68:eb:8c:e3:99:8c:56:36:
d4:57:11:71:7c:c2:2d:f2:51:60:6b:68:a3:52:cc:
7b:0a:ec:4c:f1:f4:65:36:50:c9:80:2e:04:5b:13:
51:e8:63:c0:bf:87:a0:1d:18:1f:8e:b6:37:b0:e5:
55:42:1b:0f:d5:0f:37:ab:4e:8c:1d:50:46:86:10:
9f:e6:f5:bb:1b:91:3e:aa:63:ad:9d:36:d5:6c:fa:
3d:3c:68:f9:9c:89:b1:38:3f:83:c1:ca:47:73:9f:
60:c5:1f:8a:16:c5:e6:aa:cc:ad:1d:da:03:ea:15:
09:46:5f:cc:71:d7:bd:df:0d:73:34:5a:08:6b:18:
31:a4:23:27:c9:0b:e0:b2:87:17:9b:8f:88:ca:c3:
38:39:09:1c:0d:f5:d8:ac:53:0e:47:52:5a:b7:00:
a6:e1:91:7d:42:5b:3e:30:17:3d:05:20:17:22:f2:
6a:43:a9:a5:a6:bf:92:10:22:76:eb:4a:6b:c2:b0:
99:98:b4:97:7f:7d:c0:ab:a6:81:18:db:6e:2f:e0:
0f:a7:d0:40:3c:66:bc:0d:a7:3a:91:e5:43:0a:3d:
b1:e4:1b:12:10:0d:c8:33:c4:dd:68:7e:00:44:8a:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:63:F5:A6:97:CA:8C:67:37:D2:26:EF:8C:E2:0D:D2:19:FD:9A
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/Tixj9aaXyoxnN9Im74ziDdIZ_Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.64.0/22
213.193.236.0/24
IPv6:
2a04:df40::/29
Signature Algorithm: sha256WithRSAEncryption
40:dd:7e:d6:2a:2f:f1:d5:b5:4e:25:14:87:d7:29:d2:83:b4:
e3:c1:df:b5:e4:8e:e7:f7:77:d9:e7:c7:cb:9d:0e:7c:c1:81:
06:d3:a4:70:df:cc:42:06:6f:83:a5:a6:83:34:af:19:ed:f9:
81:be:17:74:a1:ff:66:d9:18:d4:8f:a8:44:1c:f8:12:d0:e7:
be:69:35:49:12:21:aa:60:3c:42:43:44:c5:2d:f0:17:f9:07:
77:2e:00:8d:23:8f:d9:5b:17:39:1a:01:33:a7:6a:c2:f1:1e:
60:95:bc:76:23:3d:37:88:49:36:b3:01:4c:59:24:52:5b:1b:
74:5b:d5:a2:f8:2f:1f:8e:7b:6e:cc:62:ec:fa:33:68:d5:30:
08:4e:b0:2d:74:73:a3:c4:04:e0:ec:d9:6c:a2:e6:57:d7:c7:
32:72:94:5d:82:53:a2:c0:36:92:d7:8a:b5:a5:be:49:3c:ec:
6f:5c:be:6d:0a:c2:90:17:a7:d1:e3:47:39:ed:74:54:4b:3e:
9e:8f:4e:9f:f9:51:2c:9e:83:fa:10:69:eb:6d:ba:1d:48:93:
28:3c:72:04:3b:0a:02:7b:1f:a7:8e:23:4f:35:d6:d6:d8:29:
d6:3d:13:6f:1f:26:99:a0:3d:2c:8d:c5:ce:b8:9d:f4:2c:fb:
70:08:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:50 2026 by rpki-client